Setting a passcode policy requires your end users to enter a passcode, providing a first layer of defense for sensitive data on devices.

To create a device passcode profile:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > Android.

  2. Configure the General profile settings as appropriate.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Configure the Passcode settings:

    Settings Description
      Work Passcode
    Enable Work Passcode Policy Enable to apply passcode policies only to Android badged apps.
    Minimum Passcode Length Ensure passcodes are appropriately complex by setting a minimum number of characters.
    Passcode Content

    Ensure the passcode content meets your security requirements by selecting one of the following:

    Any, Numeric, Alphanumeric, Alphabetic, Complex, Complex numeric or Weak Biometric from the drop-down menu.

    Use simple values for quick access or alphanumeric passcodes for enhanced security. You can also require a minimum number of complex characters (@, #, &,! , ,? ) in the passcode.

    Weak Biometric passcode content allows low-security biometric unlock methods, such as face recognition

    Maximum Number of Failed Attempts Specify the number of attempts allowed before the device is wiped.
    Maximum Passcode Age (days) Specify the maximum number of days the passcode can be active.
    Passcode History Set the number of times a passcode must be changed before a previous passcode can be used again.
    Device Lock Timeout Range (in Minutes) Set the period of inactivity before the device screen locks automatically.
    Device Passcode
    This section is only available when OEM Settings in the General Profile is enabled and Samsung is selected from the Select OEM field.
    Enable Device Passcode Policy Apply passcode policies for the device enrolled with a Work Profile. This passcode will need to be entered to unlock the device and can be applied in addition to the work passcode. For Work Managed devices, this passcode policy is applied to the device.
    Minimum Passcode Length Ensure passcodes are appropriately complex by setting a minimum number of characters.
    Passcode Content

    Ensure the passcode content meets your security requirements by selecting Any, Numeric, Alphanumeric, Alphabetic, Complex, or Complex Numeric from the drop-down menu.

    Maximum Number of Failed Attempts Specify the number of attempts allowed before the device is wiped.
    Maximum Passcode Age (days) Specify the maximum number of days the passcode can be active.
    Passcode History Set the number of times a passcode must be changed before a previous passcode can be used again.
    Device Lock Timeout Range (in Minutes) Set the period of inactivity before the device screen locks automatically.
    Samsung Knox
    Passcode Visible Enable to show the passcode on the screen as it is entered.
    Allow Fingerprint Unlock Enable to allow users to use their fingerprint to unlock their devices and prevents using fingerprint as the primary method of authentication and instead requires that the end user enter the specified type of password in the profile instead.
    Require SD Card Encryption Indicate if the SD card requires encryption.
    Maximum Number of Repeating Characters Prevent your end users from entering easily cracked repetitive passcodes like '1111' by setting a maximum number of repeating characters.
    Maximum Length of Numeric Sequences Prevent your end user from entering an easily cracked numeric sequence like 1234 as their passcode.

    The following settings apply if you select Complex from the Passcode Content text box.

    Setting Description
    Maximum Number of Failed Attempts Specify the number of attempts allowed before the device is wiped.
    Minimum Number of Letters Specify the number of letters that can be included in the passcode.
    Minimum Number of Lower Case Letters Specify the number of lowercase letters allowed in the passcode.
    Minimum Number of Upper Case Letters Specify the number of uppercase letters allowed in the passcode.
    Minimum Number of Non-Letters Specify the number of special characters allowed in the passcode.
    Minimum Number of Numerical Digits Specify the number of numerical digits allowed in the passcode.
    Minimum Number of Symbols Specify the number of symbols allowed in the passcode.
    Maximum Passcode Age (days) Set the maximum number of days the passcode can be active.
  1. Select Save & Publish to assign the profile to associated devices.